使用个人访问令牌释放代理身份验证

使用个人访问令牌释放代理身份验证

问题描述:

我正在试图弄清楚如何配置发布代理以使用PAT身份验证。  我已设置服务帐户,并且我正在尝试查找有关如何配置它的信息。  根据我到目前为止发现的情况,我需要使用
服务帐户登录TFS网站以生成令牌。 

I'm trying to figure out how to configure a release agent to use PAT authentication.  I have the service account set up, and I'm trying to find information on how to configure it.  From what I've found so far, I need to login to the TFS site using the service account in order to generate a token. 

https:/ /www.visualstudio.com/en-us/docs/setup-admin/team-services/use-personal-access-tokens-to-authenticate

https://www.visualstudio.com/en-us/docs/setup-admin/team-services/use-personal-access-tokens-to-authenticate

我的主要问题是权限应该是什么被分配到用于发布代理的服务帐户?  允许我以该服务帐户身份登录以生成令牌需要哪些权限?  是否有任何文件
解释了这个?

My main question is what permissions should be assigned to a service account used for release agents?  What permissions are necessary to allow me to login as that service account in order to generate the token?  Is there any documentation that explains this?

另外,我很想知道更新令牌的预期流程是什么。  我们是否只需要手动登录任何发布代理帐户并生成新令牌?

Also, I'm curious about what the expected process is for renewing tokens.  Do we just have to manually login with any release agent account and generate a new token?

非常感谢任何帮助我指导相应文档,谢谢!

Any help in directing me to the appropriate documentation would be greatly appreciated, thanks!

您好KLilley,

Hi KLilley,

感谢您发布此处。

服务帐户必须具有作为服务登录权限。

The services account must have the Log on as a service permission.

运行发布代理进程的用户帐户必须是的一部分
代理池管理员帐户

The user account running the release agent process needs to be part of the Agent Pool Administrator Accounts.

请参阅
Team Foundation Server中的服务帐户和依赖项
以获取更多信息。

Please refer to Service accounts and dependencies in Team Foundation Server for more information.

无特殊权限要限制生成PAT的帐户,项目有效用户可以生成令牌。

No special permission for an account to limit to generate the PAT, a Project valid user can generate the token.

您无需续订令牌;如果前一个令牌已过期或被撤销,您可以创建一个新令牌。

You don’t need to renew the token; you can create a new token if the previous one is expired or revoked.

最好的问候。